Comparisons

reCAPTCHA Enterprise vs Standard — Complete Guide

Google offers two reCAPTCHA products: the free Standard version and the paid Enterprise version. Enterprise adds reason codes, custom risk thresholds, project-based management, and integration with Google Cloud security tools.

For automation developers, the main difference is adding enterprise=1 to CaptchaAI requests. This guide covers all the differences.


Feature comparison

Feature Standard Enterprise
Price Free (up to 1M assessments/month) $1 per 1,000 assessments (1K–100K/month), tiered pricing above
Score range 0.0–1.0 0.0–1.0
Reason codes No Yes (AUTOMATION, UNEXPECTED_ENVIRONMENT, etc.)
Custom thresholds No (set in your code) Yes (configurable per action in console)
Project management No Yes (Google Cloud Console)
API endpoint siteverify recaptchaenterprise.googleapis.com
Password leak detection No Yes
Account defender No Yes
Multi-factor authentication No Yes (WAF integration)
v2 support Yes Yes
v3 support Yes Yes

Scoring differences

Both versions return a 0.0–1.0 score, but Enterprise provides additional context:

Standard response

{
  "success": true,
  "score": 0.7,
  "action": "login",
  "challenge_ts": "2024-01-15T12:00:00Z",
  "hostname": "example.com"
}

Enterprise response

{
  "tokenProperties": {
    "valid": true,
    "action": "login",
    "createTime": "2024-01-15T12:00:00Z",
    "hostname": "example.com"
  },
  "riskAnalysis": {
    "score": 0.7,
    "reasons": ["LOW_CONFIDENCE_SCORE"],
    "extendedVerdictReasons": []
  },
  "event": {
    "token": "...",
    "siteKey": "...",
    "expectedAction": "login"
  }
}

Enterprise's reasons array tells the site why the score is what it is, enabling more nuanced security decisions.


How to identify Enterprise on a page

Indicator Standard Enterprise
Script URL google.com/recaptcha/api.js google.com/recaptcha/enterprise.js
Execute function grecaptcha.execute() grecaptcha.enterprise.execute()
Verification API siteverify endpoint recaptchaenterprise.googleapis.com
Console reCAPTCHA admin console Google Cloud Console

Check the page source:

// Standard
<script src="https://www.google.com/recaptcha/api.js?render=SITEKEY"></script>

// Enterprise
<script src="https://www.google.com/recaptcha/enterprise.js?render=SITEKEY"></script>

Solving with CaptchaAI

Standard reCAPTCHA v3

resp = requests.get("https://ocr.captchaai.com/in.php", params={
    "key": API_KEY, "method": "userrecaptcha", "version": "v3",
    "googlekey": SITEKEY, "action": "login", "pageurl": URL, "json": 1
})

Enterprise reCAPTCHA v3

resp = requests.get("https://ocr.captchaai.com/in.php", params={
    "key": API_KEY, "method": "userrecaptcha", "version": "v3",
    "enterprise": 1,  # Only difference
    "googlekey": SITEKEY, "action": "login", "pageurl": URL, "json": 1
})

Standard reCAPTCHA v2

resp = requests.get("https://ocr.captchaai.com/in.php", params={
    "key": API_KEY, "method": "userrecaptcha",
    "googlekey": SITEKEY, "pageurl": URL, "json": 1
})

Enterprise reCAPTCHA v2

resp = requests.get("https://ocr.captchaai.com/in.php", params={
    "key": API_KEY, "method": "userrecaptcha",
    "enterprise": 1,
    "googlekey": SITEKEY, "pageurl": URL, "json": 1
})

When sites upgrade to Enterprise

Reason What changes
WAF integration reCAPTCHA integrates with Cloudflare/Akamai WAF
Detailed analytics Dashboard shows risk trends and attack patterns
Custom rules Different thresholds per action
Compliance Enterprise SLA and data residency options
Account protection Password leak and account takeover detection

FAQ

Does Enterprise make reCAPTCHA harder to solve?

No. The scoring model is similar. Enterprise adds administrative features but uses the same underlying risk assessment. CaptchaAI handles both with the enterprise=1 flag.

Can I tell if a site uses Enterprise from the token?

No. The token format is the same. Check for enterprise.js in the page source instead of api.js.

Is Enterprise more expensive to solve with CaptchaAI?

Pricing may vary. Check CaptchaAI's current pricing for Enterprise vs Standard reCAPTCHA solving.

Can I use the same sitekey for both Standard and Enterprise?

No. Enterprise sitekeys are created in Google Cloud Console and are different from Standard sitekeys.


Discussions (0)

No comments yet.